- Index directories - Set up tokens or something so clients can't trivially impersonate servers - Fix possible timing gap when refreshing http_listen (Just have client wait a few seconds?) - Parameter for server URL - Parameter for static file serve path - Error handling